Principal Identity Security Researcher at Microsoft. Ex-Secureworks. (MSc, MEng, PhD, CITP, CCSK). And yes, opinions are my own ;)
Tampere, Finland
- Tweets 5,804
- Following 1,789
- Followers 21,067
- Likes 14,290
Pinned Tweet
#AADInternals Azure AD & Microsoft 365 kill chain shows how different attacker roles can get access to #AzureAD and #Microsoft365.
Pro tips:
1. Use MFA!
2. Avoid inviting unnecessary guests
3. Minimize # of Global Admins
4. Protect your on-prem servers
o365blog.com/aadkillchain/
6
178
558
👀
He copied a value out of the Windows Event Log.
Pasted it into his special browser.
And he was signed into Microsoft Entra as the user who had just authenticated.
No password. No phishing link. No stolen private key.
@MGrafnetter's Black Hat USA 2026 research...
1
2
18
5,720
Dr. Nestori Syynimaa retweeted
Four years of planning the shots paid off.
#EclipseEspaña #Eclipse
466
18,072
179,627
2,327,610
RT @Enno_Insinuator: Black Hat US 2026 with a bunch of researchers of the @ERNW_ITSec “Education Team”
2
171
Dr. Nestori Syynimaa retweeted
A record-breaking year for Microsoft's Bounty Programs!
This year, Microsoft awarded more than $20 million to 562 security researchers, the highest total payout and largest number of researchers recognized in program history.
Read the full blog to learn more about the impact of the global security research community: aka.ms/microsoft-bounty-year…
Made with AI
3
14
62
7,672
Dr. Nestori Syynimaa retweeted
For those that missed it the Active Directory tier model documentation recently had a huge uplift, and even more importantly, the scripts used to configure your AD in line with this tiered model (tier 0-1-2) have been fully open sourced for your use.
The updated repo also contains scripts to audit drift from the baselines, and a detailed FAQ to help you deploy the model.
github.com/microsoft/ActiveD…
2
105
480
26,027
Adhoc trip to Copenhagen 🇩🇰 with @SuviSyynimaa day 1 ended with visit to Tivoli 🥂🎡
1
11
1,424
Dr. Nestori Syynimaa retweeted
#TROOPERS26 videos published:
piped.video/playlist?list=PL…
21
48
10,598
Dr. Nestori Syynimaa retweeted
⏰ Final reminder: Registration for BlueHat Asia closes tonight at 11:59 PM. Secure your spot before registration closes: aka.ms/bluehatreg
BlueHat Asia is heading to Singapore on September 17–18!
👉Apply now for your chance to join us: aka.ms/bluehatreg
Applications close July 17.
#BlueHat
3
20
8,087
Visited this week the mothership 🚀in Redmond! Compulsory morning run yesterday 10k, today 6k 🏃♂️
Met a lot of old and new colleagues, also bumped into @RebeccaPattee and @nicfill from @msftsecresponse 🤟😎👍
15
1,475
Ever wondered how a certain cli flag in ffuf works? I just rewrote the whole ffuf documentation, and one of the ways to browse it is through cli flag reference. Check them out: github.com/ffuf/ffuf/wiki/CL…
8
46
4,115
@olafhartong, this is Olavinlinna (Olaf's Castle in Finnish)
1
1
877